Re: Grsec/PaX and Exec-shield

2003-11-04 Thread spender
> yes. It's a compatible opt-in for something that cannot be enabled for all > binaries, instead of an opt-out. You say it's a bug, i say it's a feature. > A really bad analogy: it's like spam, you want to opt-in not opt-out ;) That is indeed a really bad analogy. Security shouldn't be as unwan

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread spender
On Tue, Nov 04, 2003 at 06:49:58PM +0100, Ingo Molnar wrote: > > On Tue, 4 Nov 2003 [EMAIL PROTECTED] wrote: > > > [...] Are you so certain that Exec-shield stops execution in shared > > library bss/data? [...] > > no, it doesnt, this is the main (and pretty much only) substantial > difference b

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread spender
> Also note that I use LSM on all my kernels, so anything that conflicts with > LSM is something that I have no ability to test and therefore no interest in > maintaining. I'm sure I could get PaX working with LSM, but it would take > some work. Anyway I'll look into this matter after I upload